South Korea has uncovered an alleged international cybercrime network accused of using stolen personal data from government and public institution websites to create fake financial accounts and attempt large-scale fraud involving high-profile individuals, including BTS member Jungkook. Authorities said the suspected mastermind, a Chinese national identified only as “A,” has been extradited from Thailand to Seoul for interrogation in an ongoing joint investigation by the Ministry of Justice and the National Police Agency.
International Hacker Brought to Seoul
Officials said the accused was transferred from Bangkok and brought to Incheon International Airport on Tuesday. Another former leader of the same hacking ring had already been extradited in August and is currently in custody in South Korea, where trial proceedings are underway.
Registration Begins for FutureCrime Summit 2026, India’s Largest Cybercrime Conference
Investigators said the group was active between August 2023 and April 2025. During this period, the network allegedly infiltrated several government and public institution websites and stole large volumes of sensitive personal data.
Using the stolen information, the group allegedly created fraudulent mobile and brokerage accounts. Authorities believe the network attempted to bypass identity verification systems to gain unauthorized access to banking and cryptocurrency platforms.
HYBE Share Transfer Attempt Blocked
Authorities estimate that the attempted fraud could have caused financial damage of about 38 billion won, equivalent to around ₹224 crore. The figure reflects the scale of the alleged operation across multiple digital platforms where fake identities and compromised accounts were reportedly used.
One of the most prominent parts of the case involves BTS member Jungkook. The hackers allegedly attempted to illegally transfer HYBE shares worth around 8.4 billion won, or approximately ₹50.6 crore, held in his name.
Financial institutions detected the suspicious activity in time and froze the transactions, preventing any actual financial loss. Investigators credited banking and investment monitoring systems for blocking the attempted transfer at an early stage.
Probe Expands Across International Network
The gang is also suspected of targeting several wealthy individuals and corporate executives in South Korea through similar identity theft methods. Authorities said the group appeared to operate in an organized manner, with members coordinating from different countries to carry out complex financial cyber operations.
Following the extradition of the accused, investigators are now mapping the financial and technical links of the network. Officials believe more arrests may follow as the probe expands into the wider structure of the operation.
The case has placed cybersecurity agencies and the banking sector on alert. Authorities have urged citizens to avoid sharing personal or financial information through suspicious links, calls or messages, and stressed the importance of vigilance against identity theft and international cyber fraud attempts.
